CyberzSOC

Applicability
← Back to CVE-2023-38380

CVE-2023-38380

Siemens

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

CVE List v5 (CNA container)
precedence 60 · revised 2024-08-02
15 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (15)

Product Status Versions Remediation Source
Siemens/SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) Siemens · SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) affected < V3.4.29 none available cve_cna
Siemens/SIMATIC CP 1243-1 (incl. SIPLUS variants) Siemens · SIMATIC CP 1243-1 (incl. SIPLUS variants) affected < V3.4.29 none available cve_cna
Siemens/SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Siemens · SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) affected no version stated vendor label: all versions none available cve_cna
Siemens/SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Siemens · SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) affected < V3.4.29 none available cve_cna
Siemens/SIMATIC CP 1243-7 LTE Siemens · SIMATIC CP 1243-7 LTE affected < V3.4.29 none available cve_cna
Siemens/SIMATIC CP 1243-8 IRC Siemens · SIMATIC CP 1243-8 IRC affected < V3.4.29 none available cve_cna
Siemens/SIMATIC CP 1542SP-1 Siemens · SIMATIC CP 1542SP-1 affected < V2.3 none available cve_cna
Siemens/SIMATIC CP 1542SP-1 IRC Siemens · SIMATIC CP 1542SP-1 IRC affected < V2.3 none available cve_cna
Siemens/SIMATIC CP 1543-1 Siemens · SIMATIC CP 1543-1 affected < V3.0.37 none available cve_cna
Siemens/SIMATIC CP 1543SP-1 Siemens · SIMATIC CP 1543SP-1 affected < V2.3 none available cve_cna
Siemens/SINAMICS S210 (6SL5...) Siemens · SINAMICS S210 (6SL5...) affected >= V6.1, < V6.1 HF2 none available cve_cna
Siemens/SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL Siemens · SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL affected < V2.3 none available cve_cna
Siemens/SIPLUS ET 200SP CP 1543SP-1 ISEC Siemens · SIPLUS ET 200SP CP 1543SP-1 ISEC affected < V2.3 none available cve_cna
Siemens/SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL Siemens · SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL affected < V2.3 none available cve_cna
Siemens/SIPLUS NET CP 1543-1 Siemens · SIPLUS NET CP 1543-1 affected < V3.0.37 none available cve_cna

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.